X-Git-Url: http://nsz.repo.hu/git/?p=musl;a=blobdiff_plain;f=configure;h=9b06d2b43a43f5ec819f283a4ea4df209ab85d2f;hp=2969b950bd65c0989c76f32d84fcc6f16caaa900;hb=99a2af6f45b356324e99acf0da809ca416eed0de;hpb=8c0a3d9e5c169fc9d0f246ab59362b658b029ad7 diff --git a/configure b/configure index 2969b950..9b06d2b4 100755 --- a/configure +++ b/configure @@ -247,6 +247,13 @@ fi tryflag CFLAGS_AUTO -fno-unwind-tables tryflag CFLAGS_AUTO -fno-asynchronous-unwind-tables +# +# The GNU toolchain defaults to assuming unmarked files need an +# executable stack, potentially exposing vulnerabilities in programs +# linked with such object files. Fix this. +# +tryflag CFLAGS_AUTO -Wa,--noexecstack + # # Some optimization levels add bloated alignment that hurt performance #